2581 matches found
Malicious code in quasar-rollup-adonis-equinox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac168b880ae287e65f1638c1badd728ba959d9184a9c4540169154dec70e52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in exec-thuban-farout-xanadu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-proxima-semantic-ui-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653895f8925b05c1c5a5f3796d814966f8c2eee89351d88d6f07bf2bcdbdb890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in markdown-rollup-plugin-quark-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa58f284a8cac376e8e3bfee0622f1478d5c0ee0e9e7ab7763a651438499b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in loopback-test-mongodb-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c06e20ea113a93cf3404abcf96e9951035a0ebe9ec1158d959e1b2ff25a16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114010
Malicious code in epimetheus-mutation-google-neptune npm...
Malicious code in postcss-loader-mutation-command-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112151
Malicious code in json-algol-antares-mutation npm...
EUVD-2025-124696
Malicious code in mutation-foundation-mocha-cosmos npm...
Malicious code in aether-cygnus-nodejs-got (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651479aa3db2b298e19b1bf6bdb357570bc6913f883187b5579d826660d52d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115593
Malicious code in celeste-mutation-private-rollup-plugin npm...
EUVD-2025-120161
Malicious code in yakutsk-html-webpack-plugin-koa-mutation npm...
Malicious code in axios-mutation-stop-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef0f78ec274cc166f0d04c5d2e49ce4ced44fb49664709ba53e0ff780fbd8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuxtjs-redis-fork-mutation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db8c593976479e09837ccb82e9319efd093f3a426157fb5b7f92c821c43c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115471
Malicious code in chalk-elara-mutation-protractor npm...
Malicious code in despina-galaxy-auth-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316d9045e3e8076d3037b7e88e029d05d1a61786e6f3a223a912231e8e694c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124697
Malicious code in mutation-fork-module-bootstrap npm...
Malicious code in antares-config-mutation-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8607db0f5cf2f8df42373224d4090df0a43cab1471cdd21e6c2bdd337fe782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in chariklo-zenith-proxima-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d16309eec2c4b68c617d8e3add8ee19c0b69ec68801ac360a1206f5773a74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...